CVEvulnerability

CVE-2021-25033

6.1 MEDIUM Published 2022-02-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Affected configurations

• noptin noptin (< 1.6.5)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References